IT Security Engineer

RESPONSIBILITIES:

• Understand Application Security service and tooling needs and gather technical requirements
• Manage the implementation and configuration of patch assurance tooling.
• Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool
• Lead end-to-end integration of security software tools, including definition of integration design, configuration and testing.
• Provides authoritative advice and guidance on any aspect of test planning and execution.
• Engage closely with the platform engineering teams to help determine technical controls for obsolete windows 2003 Server and Windows XP platforms and determine a prioritized implementation schedule.
• Document mitigating controls for obsolete windows 2003 Server and Windows XP platforms and facilitate training and capability handover to BAU teams.

KEY STAKEHOLDERS:

• Security Technology Service domain heads
• Application Security Scanning & Remediation Teams
• Technology Services Infrastructure Engineering and Operations
• Development team leads for various CIO streams

COMPETENCIES (KNOWLEDGE & SKILLS):

• Bachelors Degree in Computer Science, Information Technology or related field
• 8+ years of Security Tooling experience in the context of vulnerability management, patch assurance and vulnerability remediation
• Good understanding of cyber security and the challenges around implementing change in this space
• A highly analytical, process oriented, collaborative and creative individual
• An individual that is willing to take ownership for driving change and challenge existing concepts
• Hands on experience with system hardeing for Linux and Windows Platforms via the implementation of controls.
• Detailed working knowledge of various Application Security products covering static and dynamic testing models
• Experience in the configuration and implementation of security management tooling products eg: Tanium.
• Experience in cloud security products and a good understanding of DevSecOps principles

Experience in managing large scale deployments of Application Security products